CVE-2024-54031
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
CVE-2024-54031 is a medium vulnerability (CVSS 5.5) in Linux, published January 15, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 13th percentile. Fixed in linux-lts 6.1.124-r0.
- Severity
- 5.5 MediumCVSS 3.1, NVD
- Exploit chance
- 0.23%EPSS, 13th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
6.1.124-r0linux-lts +221 more
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
Access to genmask field in struct nft_set_ext results in unaligned atomic read:
[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---
Align struct nft_set_ext to word size to address this and documentation it.
pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-ltsAlpaquita:23 | 6.1.121-r0 up to 6.1.124-r0 | 6.1.124-r0 |
linux-ltsAlpaquita:25 | 6.6.89-r0 up to 6.12.41-r0 | 6.12.41-r0 |
bpftoolTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
kernel-uekTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
kernel-uek-containerTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
kernel-uek-container-debugTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
kernel-uek-debugTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
kernel-uek-debug-develTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
kernel-uek-develTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
kernel-uek-headersTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
Show 212 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-uek-toolsTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
perfTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
python-perfTuxCare:OracleLinux:7 From an advisory covering 218 CVEs | before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els1 |
KernelLinux | 5.4.287 up to 5.4.289, 5.10.231 up to 5.10.233, 5.15.174 up to 5.15.176, 6.1.120 up to 6.1.124, 6.6.66 up to 6.6.70, 6.12.5 up to 6.12.9 | 5.4.2895.10.2335.15.1766.1.1246.6.706.12.9 |
linuxDebian:12 | before 6.1.124-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 28 moreShow less6.1.119-16.1.123-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1 | 6.1.124-1 |
linuxDebian:13 | before 6.12.9-1 | 6.12.9-1 |
linuxDebian:14 | before 6.12.9-1 | 6.12.9-1 |
linuxDebian:11 From an advisory covering 387 CVEs | before 5.10.234-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 39 moreShow less5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2 | 5.10.234-1 |
linux-6.1Debian:11 From an advisory covering 333 CVEs | before 6.1.128-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1 | 6.1.128-1~deb11u1 |
kernelMageia:9 From an advisory covering 202 CVEs | before 6.6.74-1.mga9 | 6.6.74-1.mga9 |
kmod-virtualboxMageia:9 From an advisory covering 202 CVEs | before 7.0.24-64.mga9 | 7.0.24-64.mga9 |
kmod-xtables-addonsMageia:9 From an advisory covering 202 CVEs | before 3.24-70.mga9 | 3.24-70.mga9 |
dwarvesMageia:9 From an advisory covering 202 CVEs | before 1.29-1.mga9 | 1.29-1.mga9 |
kernel-linusMageia:9 From an advisory covering 202 CVEs | before 6.6.74-1.mga9 | 6.6.74-1.mga9 |
kernel-defaultSUSE:Linux Enterprise Micro 5.5 From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.5 From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1.150500.6.67.1 | 5.14.21-150500.55.136.1.150500.6.67.1 |
kernel-sourceSUSE:Linux Enterprise Micro 5.5 From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-livepatch-SLE15-SP5_Update_35SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 50 CVEs | before 1-150500.11.3.1 | 1-150500.11.3.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1.150500.6.67.1 | 5.14.21-150500.55.136.1.150500.6.67.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1.150500.6.67.1 | 5.14.21-150500.55.136.1.150500.6.67.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1.150500.6.67.1 | 5.14.21-150500.55.136.1.150500.6.67.1 |
kernel-docsSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1.150500.6.67.1 | 5.14.21-150500.55.136.1.150500.6.67.1 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 50 CVEs | before 5.14.21-150500.55.136.1 | 5.14.21-150500.55.136.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.2 From an advisory covering 25 CVEs | before 5.3.18-150300.59.235.1 | 5.3.18-150300.59.235.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.2 From an advisory covering 25 CVEs | before 5.3.18-150300.59.235.1.150300.18.140.1 | 5.3.18-150300.59.235.1.150300.18.140.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.2 From an advisory covering 25 CVEs | before 5.3.18-150300.235.1 | 5.3.18-150300.235.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.2 From an advisory covering 25 CVEs | before 5.3.18-150300.235.1 | 5.3.18-150300.235.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 50 CVEs | before 5.14.21-150500.13.121.1 | 5.14.21-150500.13.121.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 50 CVEs | before 5.14.21-150500.13.121.1 | 5.14.21-150500.13.121.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.3 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.3 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1.150400.24.98.3 | 5.14.21-150400.24.194.1.150400.24.98.3 |
kernel-defaultSUSE:Linux Enterprise Micro 5.4 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.4 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1.150400.24.98.3 | 5.14.21-150400.24.194.1.150400.24.98.3 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-livepatch-SLE15-SP4_Update_48SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 380 CVEs | before 1-150400.9.7.1 | 1-150400.9.7.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1.150400.24.98.3 | 5.14.21-150400.24.194.1.150400.24.98.3 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1.150400.24.98.3 | 5.14.21-150400.24.194.1.150400.24.98.3 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1.150400.24.98.3 | 5.14.21-150400.24.194.1.150400.24.98.3 |
kernel-docsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1.150400.24.98.3 | 5.14.21-150400.24.194.1.150400.24.98.3 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 380 CVEs | before 5.14.21-150400.24.194.1 | 5.14.21-150400.24.194.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 44 CVEs | before 5.14.21-150400.15.145.1 | 5.14.21-150400.15.145.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 44 CVEs | before 5.14.21-150400.15.145.1 | 5.14.21-150400.15.145.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 44 CVEs | before 5.14.21-150400.15.145.1 | 5.14.21-150400.15.145.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 44 CVEs | before 5.14.21-150400.15.145.1 | 5.14.21-150400.15.145.1 |
kernel-64kbSUSE:Linux Micro 6.2 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-defaultSUSE:Linux Micro 6.2 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-default-baseSUSE:Linux Micro 6.2 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1.160000.2.7 | 6.12.0-160000.26.1.160000.2.7 |
kernel-rtSUSE:Linux Micro 6.2 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-sourceSUSE:Linux Micro 6.2 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-obs-buildSUSE:Linux Micro Extras 6.2 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-symsSUSE:Linux Micro Extras 6.2 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-64kbSUSE:Linux Enterprise Server 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-azureSUSE:Linux Enterprise Server 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-defaultSUSE:Linux Enterprise Server 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-default-baseSUSE:Linux Enterprise Server 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1.160000.2.7 | 6.12.0-160000.26.1.160000.2.7 |
kernel-docsSUSE:Linux Enterprise Server 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-obs-qaSUSE:Linux Enterprise Server 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-sourceSUSE:Linux Enterprise Server 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-symsSUSE:Linux Enterprise Server 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-64kbSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-azureSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1.160000.2.7 | 6.12.0-160000.26.1.160000.2.7 |
kernel-docsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-obs-qaSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
linux-hwe-edgeUbuntu:16.04:LTS | All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 | None known |
linux-aws-5.0Ubuntu:18.04:LTS | All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 | None known |
linux-aws-5.3Ubuntu:18.04:LTS | All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 | None known |
linux-azureUbuntu:18.04:LTS | All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 | None known |
linux-azure-5.3Ubuntu:18.04:LTS | All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 | None known |
linux-azure-edgeUbuntu:18.04:LTS | All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 | None known |
linux-gcpUbuntu:18.04:LTS | All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 | None known |
linux-gcp-5.3Ubuntu:18.04:LTS | All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 | None known |
linux-gke-4.15Ubuntu:18.04:LTS | All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 | None known |
linux-gke-5.4Ubuntu:18.04:LTS | All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 | None known |
linux-gkeop-5.4Ubuntu:18.04:LTS | All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 | None known |
linux-hweUbuntu:18.04:LTS | All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 | None known |
linux-hwe-edgeUbuntu:18.04:LTS | All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 | None known |
linux-oemUbuntu:18.04:LTS | All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 | None known |
linux-oracle-5.0Ubuntu:18.04:LTS | All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 | None known |
linux-oracle-5.3Ubuntu:18.04:LTS | All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 | None known |
linux-aws-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 | None known |
linux-aws-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1 | None known |
linux-aws-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1 | None known |
linux-azure-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2 | None known |
linux-azure-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1 | None known |
linux-azure-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1 | None known |
linux-azure-fdeUbuntu:20.04:LTS | All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1 | None known |
linux-gcp-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3 | None known |
linux-gcp-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1 | None known |
linux-gcp-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41 | None known |
linux-gkeUbuntu:20.04:LTS | All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111 | None known |
linux-gke-5.15Ubuntu:20.04:LTS | All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1 | None known |
linux-gkeopUbuntu:20.04:LTS | All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77 | None known |
linux-gkeop-5.15Ubuntu:20.04:LTS | All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1 | None known |
linux-hwe-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1 | None known |
linux-hwe-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1 | None known |
linux-hwe-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1 | None known |
linux-intel-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19 | None known |
linux-oem-5.10Ubuntu:20.04:LTS | All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61 | None known |
linux-oem-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36 | None known |
linux-oem-5.14Ubuntu:20.04:LTS | All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67 | None known |
linux-oem-5.6Ubuntu:20.04:LTS | All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60 | None known |
linux-oracle-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 | None known |
linux-oracle-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1 | None known |
linux-oracle-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1 | None known |
linux-raspi2Ubuntu:20.04:LTS | All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6 | None known |
linux-riscvUbuntu:20.04:LTS | All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45 | None known |
linux-riscv-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35 | None known |
linux-riscv-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1 | None known |
linux-allwinner-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1 | None known |
linux-aws-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1 | None known |
linux-aws-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1 | None known |
linux-aws-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1 | None known |
linux-azure-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2 | None known |
linux-azure-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1 | None known |
linux-azure-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1 | None known |
linux-azure-fde-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1 | None known |
linux-azure-fde-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1 | None known |
linux-gcp-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1 | None known |
linux-gcp-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1 | None known |
linux-gcp-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1 | None known |
linux-hwe-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50 | None known |
linux-hwe-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1 | None known |
linux-hwe-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1 | None known |
linux-intel-iot-realtimeUbuntu:22.04:LTS | All versions, plus listed versions 5.15.0-1073.75 | None known |
linux-lowlatency-hwe-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30 | None known |
linux-lowlatency-hwe-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1 | None known |
linux-lowlatency-hwe-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1 | None known |
linux-nvidia-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15 | None known |
linux-nvidia-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25 | None known |
linux-oem-5.17Ubuntu:22.04:LTS | All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36 | None known |
linux-oem-6.0Ubuntu:22.04:LTS | All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21 | None known |
linux-oem-6.1Ubuntu:22.04:LTS | All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36 | None known |
linux-oem-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 14 moreShow less6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28 | None known |
linux-oracle-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 8 moreShow less6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1 | None known |
linux-realtimeUbuntu:22.04:LTS | All versions, plus listed versions 5.15.0-1032.35 | None known |
linux-riscvUbuntu:22.04:LTS | All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32 | None known |
linux-riscv-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1 | None known |
linux-riscv-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1 Show 5 moreShow less6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1 | None known |
linux-starfive-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1 | None known |
linux-starfive-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1 | None known |
linux-starfive-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1 Show 6 moreShow less6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1 | None known |
linux-raspi-realtimeUbuntu:24.04:LTS | All versions, plus listed versions 6.8.0-2019.20 | None known |
dtb-aarch64openSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-64kbopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-azureopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-defaultopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-default-baseopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1.160000.2.7 | 6.12.0-160000.26.1.160000.2.7 |
kernel-docsopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-kvmsmallopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-obs-buildopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-obs-qaopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-rtopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-sourceopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-symsopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
kernel-zfcpdumpopenSUSE:Leap 16.0 From an advisory covering 205 CVEs | before 6.12.0-160000.26.1 | 6.12.0-160000.26.1 |
What each source reports
NVD Score used 5.5
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
Access to genmask field in struct nft_set_ext results in unaligned atomic read:
[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---
Align struct nft_set_ext to word size to address this and documentation it.
pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.
- Record
CVE-2024-54031- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
CVE ListNo score
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
Access to genmask field in struct nft_set_ext results in unaligned atomic read:
[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---
Align struct nft_set_ext to word size to address this and documentation it.
pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.
- Record
CVE-2024-54031- Updated
- 2026-11-02
EUVDEUVD-2024-52246No score
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
Access to genmask field in struct nft_set_ext results in unaligned atomic read:
[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---
Align struct nft_set_ext to word size to address this and documentation it.
pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.
- Record
EUVD-2024-52246- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-3cpc-x5c2-65qq 5.5
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash:...
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
Access to genmask field in struct nft_set_ext results in unaligned atomic read:
[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---
Align struct nft_set_ext to word size to address this and documentation it.
pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.
- Record
GHSA-3cpc-x5c2-65qq- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2024-54031 5.5
- Record
BELL-CVE-2024-54031- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-54031 5.5
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext Access to genmask field in struct nft_set_ext results in unaligned atomic read: [ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]--- Align struct nft_set_ext to word size to address this and documentation it. pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.
- Record
DEBIAN-CVE-2024-54031- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 16 moreShow less
OSVUBUNTU-CVE-2024-54031 5.5
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext Access to genmask field in struct nft_set_ext results in unaligned atomic read: [ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]--- Align struct nft_set_ext to word size to address this and documentation it. pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.
- Record
UBUNTU-CVE-2024-54031- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2025-1746479711No score
kernel-uek: Fix of 225 CVEs
- sctp: sysctl: auth_enable: avoid using current->nsproxy
- sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640}
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
- jfs: fix slab-out-of-bounds read in ea_get()
- serial: 8250_dma: terminate correct DMA in tx_dma_flush()
- Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
- net: usb: usbnet: restore usb%d name exception for local mac addresses
- vlan: fix memory leak in vlan_newlink() {CVE-2022-49636}
- rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity
- LTS tag: v5.4.291
- eeprom: digsy_mtc: Make GPIO lookup table match the device
- slimbus: messaging: Free transaction ID in delayed interrupt scenario {CVE-2025-21914}
- intel_th: pci: Add Panther Lake-P/U support
- intel_th: pci: Add Panther Lake-H support
- intel_th: pci: Add Arrow Lake support
- Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
- xhci: pci: Fix indentation in the PCI device ID definitions
- usb: gadget: Check bmAttributes only if configuration is valid
- usb: gadget: Fix setting self-powered state on suspend
- usb: gadget: Set self-powered based on MaxPower and bmAttributes
- usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
- usb: typec: ucsi: increase timeout for PPM reset operations
- usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
- usb: renesas_usbhs: Flush the notify_hotplug_work {CVE-2025-21917}
- usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
- usb: renesas_usbhs: Use devm_usb_get_phy()
- usb: renesas_usbhs: Call clk_put()
- Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
- gpio: rcar: Fix missing of_node_put() call
- net: ipv6: fix missing dst ref drop in ila lwtunnel
- net: ipv6: fix dst ref loop in ila lwtunnel
- net-timestamp: support TCP GSO case for a few missing flags
- vlan: enforce underlying device type {CVE-2025-21920}
- ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
- be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
- drm/sched: Fix preprocessor guard
- hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
- llc: do not use skb_get() before dev_queue_xmit() {CVE-2025-21925}
- hwmon: (ad7314) Validate leading zero bits and return error
- hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
- hwmon: (pmbus) Initialise page count in pmbus_identify()
- caif_virtio: fix wrong pointer check in cfv_probe() {CVE-2025-21904}
- net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
- HID: google: fix unused variable warning under !CONFIG_ACPI
- wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}
- mm/page_alloc: fix uninitialized variable
- rapidio: fix an API misues when rio_add_net() fails {CVE-2025-21934}
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
- wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
- x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
- x86/cpu: Validate CPUID leaf 0x2 EDX output
- x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
- platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
- drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
- ALSA: hda/realtek: update ALC222 depop optimize
- ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
- HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
- Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
- drm/amdgpu: disable BAR resize on Dell G5 SE
- drm/amdgpu: Check extended configuration space register when system uses large bar
- drm/amdgpu: skip BAR resizing if the bios already…
- Record
CLSA-2025-1746479711- Updated
- 2026-11-02
OSVNo score
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
Access to genmask field in struct nft_set_ext results in unaligned atomic read:
[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---
Align struct nft_set_ext to word size to address this and documentation it.
pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.
- Record
CVE-2024-54031- Updated
- 2026-11-02
OSVMGASA-2025-0030No score
Updated kernel, kmod-virtualbox, kmod-xtables-addons & dwarves packages fix security vulnerabilities
Upstream kernel version 6.6.74 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.
- Record
MGASA-2025-0030- Updated
- 2026-11-02
OSVMGASA-2025-0032No score
Updated kernel-linus packages fix security vulnerabilities
Vanilla upstream kernel version 6.6.74 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.
- Record
MGASA-2025-0032- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20287-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
- CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
- CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
- CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
- CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
- CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
- CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
- CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
- CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
- CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
- CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
- CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
- CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
- CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
- CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
- CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
- CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
- CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
- CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
- CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
- CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
- CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
- CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
- CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
- CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
- CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
- CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
- CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
- CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
- CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
- CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
- CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
- CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
- CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
- CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
- CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
- CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
- CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
- CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
- Record
openSUSE-SU-2026:20287-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0474-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
- CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
- CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
- CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
- CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
- CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
- CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
- CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
- CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
- CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
- CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
- CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
- CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
- CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
- CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
- CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
- CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
- CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
- CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
- CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
The following non security issues were fixed:
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (bsc#1253087).
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- x86: make page fault handling disable interrupts properly (git-fixes).
- Record
SUSE-SU-2026:0474-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0475-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
- CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
- CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
- CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
- CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
- CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
- CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
- CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
- CVE-2026-23001: macvlan: Use 'hash' iterators to simplify code (bsc#1257232).
- Record
SUSE-SU-2026:0475-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0495-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
- CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
- CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
- CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
- CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
- CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
- CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
- CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
- CVE-2026-23001: macvlan: Use 'hash' iterators to simplify code (bsc#1257232).
- Record
SUSE-SU-2026:0495-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0496-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
- CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
- CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
- CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
- CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
- CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
- CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
- CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
- CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
- CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
- CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
- CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
- CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
- CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
- CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
- CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
- CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
- CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
- CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
- CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
- CVE-2023-53215: sched/fair: Don't balance task to its current running CPU (bsc#1250397).
- CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
The following non security issues were fixed:
- Revert 'ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582)'.
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (bsc#1253087 bsc#1254447).
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- x86: make page fault handling disable interrupts properly (git-fixes).
- Record
SUSE-SU-2026:0496-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0617-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
- CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
- CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
- CVE-2023-53215: sched/fair: Don't balance task to its current running CPU (bsc#1250397).
- CVE-2023-53254: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (bsc#1249871).
- CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
- CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
- CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
- CVE-2024-28956: x86/its: Enumerate Indirect Target Selection (ITS) bug (bsc#1242006).
- CVE-2024-36348: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
- CVE-2024-36349: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
- CVE-2024-36350: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
- CVE-2024-36357: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
- CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
- CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
- CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
- CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
- CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
- CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40019: crypto: essiv - Check ssize for decryption and in-place encryption (bsc#1252678).
- CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
- CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
- CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).
- CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
- CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
- CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
- CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
- CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
- CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
- CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
- CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free (bsc#1255688).
- CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
- CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
- CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
- CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
- CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
- CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
- CVE-2026-22999: net/sched: sch_qfq: do not free…
- Record
SUSE-SU-2026:0617-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:1131-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
- CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
- CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
- CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
- CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
- CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
- CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
- CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
- CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
- CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
- CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
- CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
- CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
- CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
- CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
- CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
- CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
- CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).
The following non security issues were fixed:
- apparmor: fix differential encoding verification (bsc#1258849).
- apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
- apparmor: fix memory leak in verify_header (bsc#1258849).
- apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
- apparmor: fix race between freeing data and fs accessing it (bsc#1258849).
- apparmor: fix race on rawdata dereference (bsc#1258849).
- apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
- apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
- apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
- apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
- apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
- net: tcp: allow zero-window ACK update the window (bsc#1254767).
- net: tcp: send zero-window ACK when no memory (bsc#1254767).
- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
- tcp: correct handling of extreme memory squeeze (bsc#1254767).
- x86/its: Fix crash during dynamic its initialization (bsc#1257771).
- x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
- Record
SUSE-SU-2026:1131-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20555-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
- CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
- CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
- CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
- CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
- CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
- CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
- CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
- CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
- CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
- CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
- CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
- CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
- CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
- CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
- CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
- CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
- CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
- CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
- CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
- CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
- CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
- CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
- CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
- CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
- CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
- CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
- CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
- CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
- CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
- CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
- CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
- CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
- CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
- CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
- CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
- CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
- CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
- CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
- Record
SUSE-SU-2026:20555-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20570-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
- CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
- CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
- CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
- CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
- CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
- CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
- CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
- CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
- CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
- CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
- CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
- CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
- CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
- CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
- CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
- CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
- CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
- CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
- CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
- CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
- CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
- CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
- CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
- CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
- CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
- CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
- CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
- CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
- CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
- CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
- CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
- CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
- CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
- CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
- CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
- CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
- CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
- CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
- Record
SUSE-SU-2026:20570-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20599-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
- CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
- CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
- CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
- CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
- CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
- CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
- CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
- CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
- CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
- CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
- CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
- CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
- CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
- CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
- CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
- CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
- CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
- CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
- CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
- CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
- CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
- CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
- CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
- CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
- CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
- CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
- CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
- CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
- CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
- CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
- CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
- CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
- CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
- CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
- CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
- CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
- CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
- CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
- Record
SUSE-SU-2026:20599-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20615-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
- CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
- CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
- CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
- CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
- CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
- CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
- CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
- CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
- CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
- CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
- CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
- CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
- CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
- CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
- CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
- CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
- CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
- CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
- CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
- CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
- CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
- CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
- CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
- CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
- CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
- CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
- CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
- CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
- CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
- CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
- CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
- CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
- CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
- CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
- CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
- CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
- CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
- CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
- CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
- CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
- Record
SUSE-SU-2026:20615-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
git.kernel.org/stable/c/352f8eaaabd008f09d1e176194edc261a7304084
git.kernel.org/stable/c/6a14b46052eeb83175a95baf399283860b9d94c4
git.kernel.org/stable/c/277f00b0c2dca8794cf4837722960bdc4174911f
git.kernel.org/stable/c/607774a13764676d4b8be9c8b9c66b8cf3469043
git.kernel.org/stable/c/4f49349c1963e507aa37c1ec05178faeb0103959
git.kernel.org/stable/c/d24cbc43cc7b41a0824b0bc6ec4d8436d8d7a9c0
Show 194 moreShow less
git.kernel.org/stable/c/542ed8145e6f9392e3d0a86a0e9027d2ffd183e4
lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.org/debian-lts-announce/2025/03/msg00002.html
nvd.nist.gov/vuln/detail/CVE-2024-54031
github.com/advisories/GHSA-3cpc-x5c2-65qq
docs.bell-sw.com/security/cves/CVE-2024-54031
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1746479711.html
nvd.nist.gov/vuln/detail/CVE-2021-47498
nvd.nist.gov/vuln/detail/CVE-2022-49034
nvd.nist.gov/vuln/detail/CVE-2022-49636
nvd.nist.gov/vuln/detail/CVE-2022-50313
nvd.nist.gov/vuln/detail/CVE-2023-52532
nvd.nist.gov/vuln/detail/CVE-2024-26982
nvd.nist.gov/vuln/detail/CVE-2024-36929
nvd.nist.gov/vuln/detail/CVE-2024-38538
nvd.nist.gov/vuln/detail/CVE-2024-38588
nvd.nist.gov/vuln/detail/CVE-2024-39494
nvd.nist.gov/vuln/detail/CVE-2024-41080
nvd.nist.gov/vuln/detail/CVE-2024-43098
nvd.nist.gov/vuln/detail/CVE-2024-47707
nvd.nist.gov/vuln/detail/CVE-2024-49884
nvd.nist.gov/vuln/detail/CVE-2024-49936
nvd.nist.gov/vuln/detail/CVE-2024-49974
nvd.nist.gov/vuln/detail/CVE-2024-49996
nvd.nist.gov/vuln/detail/CVE-2024-50055
nvd.nist.gov/vuln/detail/CVE-2024-50264
nvd.nist.gov/vuln/detail/CVE-2024-50265
nvd.nist.gov/vuln/detail/CVE-2024-50267
nvd.nist.gov/vuln/detail/CVE-2024-50273
nvd.nist.gov/vuln/detail/CVE-2024-50278
nvd.nist.gov/vuln/detail/CVE-2024-50279
nvd.nist.gov/vuln/detail/CVE-2024-50282
nvd.nist.gov/vuln/detail/CVE-2024-50287
nvd.nist.gov/vuln/detail/CVE-2024-50290
nvd.nist.gov/vuln/detail/CVE-2024-50299
nvd.nist.gov/vuln/detail/CVE-2024-50301
nvd.nist.gov/vuln/detail/CVE-2024-50302
nvd.nist.gov/vuln/detail/CVE-2024-53052
nvd.nist.gov/vuln/detail/CVE-2024-53063
nvd.nist.gov/vuln/detail/CVE-2024-53066
nvd.nist.gov/vuln/detail/CVE-2024-53101
nvd.nist.gov/vuln/detail/CVE-2024-53103
nvd.nist.gov/vuln/detail/CVE-2024-53104
nvd.nist.gov/vuln/detail/CVE-2024-53112
nvd.nist.gov/vuln/detail/CVE-2024-53121
nvd.nist.gov/vuln/detail/CVE-2024-53124
nvd.nist.gov/vuln/detail/CVE-2024-53130
nvd.nist.gov/vuln/detail/CVE-2024-53131
nvd.nist.gov/vuln/detail/CVE-2024-53135
nvd.nist.gov/vuln/detail/CVE-2024-53138
nvd.nist.gov/vuln/detail/CVE-2024-53140
nvd.nist.gov/vuln/detail/CVE-2024-53141
nvd.nist.gov/vuln/detail/CVE-2024-53142
nvd.nist.gov/vuln/detail/CVE-2024-53145
nvd.nist.gov/vuln/detail/CVE-2024-53146
nvd.nist.gov/vuln/detail/CVE-2024-53148
nvd.nist.gov/vuln/detail/CVE-2024-53150
nvd.nist.gov/vuln/detail/CVE-2024-53155
nvd.nist.gov/vuln/detail/CVE-2024-53156
nvd.nist.gov/vuln/detail/CVE-2024-53157
nvd.nist.gov/vuln/detail/CVE-2024-53158
nvd.nist.gov/vuln/detail/CVE-2024-53161
nvd.nist.gov/vuln/detail/CVE-2024-53164
github.com/CVEProject/cvelistV5/tree/main/cves/2024/54xxx/CVE-2024-54031.json
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
security-tracker.debian.org/tracker/CVE-2024-54031
advisories.mageia.org/MGASA-2025-0030.html
bugs.mageia.org/show_bug.cgi?id=33961
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.66
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.67
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.68
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.69
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.70
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.71
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.72
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.73
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.74
advisories.mageia.org/MGASA-2025-0032.html
bugs.mageia.org/show_bug.cgi?id=33968
suse.com/support/update/announcement/2026/suse-su-20260474-1
bugzilla.suse.com/1220137
bugzilla.suse.com/1220144
bugzilla.suse.com/1222323
bugzilla.suse.com/1223007
bugzilla.suse.com/1225049
bugzilla.suse.com/1233038
bugzilla.suse.com/1235905
bugzilla.suse.com/1236104
bugzilla.suse.com/1236208
bugzilla.suse.com/1237885
bugzilla.suse.com/1237906
bugzilla.suse.com/1238414
bugzilla.suse.com/1238754
bugzilla.suse.com/1238763
bugzilla.suse.com/1244758
bugzilla.suse.com/1244904
bugzilla.suse.com/1245110
bugzilla.suse.com/1245210
bugzilla.suse.com/1245723
bugzilla.suse.com/1245751
bugzilla.suse.com/1247177
bugzilla.suse.com/1247483
bugzilla.suse.com/1248306
bugzilla.suse.com/1248377
bugzilla.suse.com/1249156
bugzilla.suse.com/1249158
bugzilla.suse.com/1249827
bugzilla.suse.com/1252785
bugzilla.suse.com/1253028
bugzilla.suse.com/1253087
bugzilla.suse.com/1253409
bugzilla.suse.com/1253702
bugzilla.suse.com/1254447
bugzilla.suse.com/1254462
bugzilla.suse.com/1254463
bugzilla.suse.com/1254464
bugzilla.suse.com/1254465
bugzilla.suse.com/1254767
bugzilla.suse.com/1254842
bugzilla.suse.com/1255171
bugzilla.suse.com/1255251
bugzilla.suse.com/1255377
bugzilla.suse.com/1255401
bugzilla.suse.com/1255594
bugzilla.suse.com/1255908
bugzilla.suse.com/1256095
bugzilla.suse.com/1256582
bugzilla.suse.com/1256612
bugzilla.suse.com/1256623
bugzilla.suse.com/1256641
bugzilla.suse.com/1256726
bugzilla.suse.com/1256744
bugzilla.suse.com/1256779
bugzilla.suse.com/1256792
bugzilla.suse.com/1257232
bugzilla.suse.com/1257236
suse.com/security/cve/CVE-2022-49604
suse.com/security/cve/CVE-2022-49943
suse.com/security/cve/CVE-2022-49980
suse.com/security/cve/CVE-2022-50232
suse.com/security/cve/CVE-2022-50697
suse.com/security/cve/CVE-2023-52433
suse.com/security/cve/CVE-2023-52874
suse.com/security/cve/CVE-2023-52923
suse.com/security/cve/CVE-2023-53178
suse.com/security/cve/CVE-2023-53407
suse.com/security/cve/CVE-2023-53412
suse.com/security/cve/CVE-2023-53417
suse.com/security/cve/CVE-2023-53418
suse.com/security/cve/CVE-2023-53714
suse.com/security/cve/CVE-2023-54142
suse.com/security/cve/CVE-2023-54243
suse.com/security/cve/CVE-2024-26581
suse.com/security/cve/CVE-2024-26661
suse.com/security/cve/CVE-2024-26832
suse.com/security/cve/CVE-2024-50143
suse.com/security/cve/CVE-2024-54031
suse.com/security/cve/CVE-2025-21658
suse.com/security/cve/CVE-2025-21760
suse.com/security/cve/CVE-2025-21764
suse.com/security/cve/CVE-2025-21765
suse.com/security/cve/CVE-2025-21766
suse.com/security/cve/CVE-2025-38068
suse.com/security/cve/CVE-2025-38129
suse.com/security/cve/CVE-2025-38159
suse.com/security/cve/CVE-2025-38375
suse.com/security/cve/CVE-2025-38563
suse.com/security/cve/CVE-2025-38565
suse.com/security/cve/CVE-2025-38684
suse.com/security/cve/CVE-2025-40044
suse.com/security/cve/CVE-2025-40139
suse.com/security/cve/CVE-2025-40257
suse.com/security/cve/CVE-2025-40300
suse.com/security/cve/CVE-2025-68183
suse.com/security/cve/CVE-2025-68284
suse.com/security/cve/CVE-2025-68285
suse.com/security/cve/CVE-2025-68312
suse.com/security/cve/CVE-2025-68771
suse.com/security/cve/CVE-2025-68813
suse.com/security/cve/CVE-2025-71085
suse.com/security/cve/CVE-2025-71089
suse.com/security/cve/CVE-2025-71112
suse.com/security/cve/CVE-2025-71116
suse.com/security/cve/CVE-2025-71120
suse.com/security/cve/CVE-2026-22999
suse.com/security/cve/CVE-2026-23001
suse.com/support/update/announcement/2026/suse-su-20260475-1
suse.com/security/cve/CVE-2022-50329
suse.com/security/cve/CVE-2022-50488
suse.com/security/cve/CVE-2023-52983
suse.com/support/update/announcement/2026/suse-su-20260495-1
ubuntu.com/security/CVE-2024-54031
cve.org/CVERecord?id=CVE-2024-54031
git.kernel.org/linus/542ed8145e6f9392e3d0a86a0e9027d2ffd183e4
Left out here: 29 versions, 1,313 references and the rest of 7 source descriptions. The JSON record has them.